diff --git a/modules/cloudevent-job/README.md b/modules/cloudevent-job/README.md new file mode 100644 index 00000000..3c5bb811 --- /dev/null +++ b/modules/cloudevent-job/README.md @@ -0,0 +1,120 @@ +# `cloudevent-job` + +```mermaid +flowchart LR + subgraph "regional network" + A[[Pub/Sub topic]] -- notifies --> B(Invoker) -- executs --> C(Job) + end +``` + +This module abstracts regionalizied event-triggered Cloud Run Jobs. +It's intended to be used with the "Broker" abstraction is described by the sibling [`cloudevent-broker`](./../cloudevent-broker/) module. + +This can be helpful if you need to trigger a long-running task written in Go. If you don't need a long-running Job, you should use [`cloudevent-trigger`](./../cloudevent-trigger/) instead, with a `regional-go-service` or `regional-service`. + +When the Go service is invoked, it will be invoked with one argument, `--event`, which will contain the JSON-encoded raw event payload. + +By default, trigger services will be created in every region, and invoke Jobs in their local region. If you want to only run jobs in one region, you can set the `job.region` to a single region within the set of regions in your regional networks. This will instruct the regional trigger services to only execute the Job in that single region. + +The intended usage of this module for consuming events is something like this: + +```hcl +// Create a network with several regional subnets +module "networking" { + source = "chainguard-dev/common/infra//modules/networking" + + name = "my-networking" + project_id = var.project_id + regions = [...] +} + +// Create the Broker abstraction. +module "cloudevent-broker" { + source = "chainguard-dev/common/infra//modules/cloudevent-broker" + + name = "my-broker" + project_id = var.project_id + regions = module.networking.regional-networks +} + +// Set up regionalized services to deliver filtered events from our regionalized +// brokers to our regionalized Jobs. +module "cloudevent-job" { + for_each = module.networking.regional-networks + + source = "chainguard-dev/common/infra//modules/cloudevent-job" + + name = "bar" + project_id = var.project_id + broker = module.cloudevent-broker.broker + + // Only trigger on bar-type events. + filter = { "type" : "dev.chainguard.bar" } + + job = { + name = "my-job" + source = { + importpath = "./cmd/bar" + } + } +} +``` + + +## Requirements + +No requirements. + +## Providers + +| Name | Version | +|------|---------| +| [google](#provider\_google) | n/a | +| [google-beta](#provider\_google-beta) | n/a | +| [random](#provider\_random) | n/a | + +## Modules + +| Name | Source | Version | +|------|--------|---------| +| [authorize-delivery](#module\_authorize-delivery) | ../authorize-private-service | n/a | + +## Resources + +| Name | Type | +|------|------| +| [google-beta_google_project_service_identity.pubsub](https://registry.terraform.io/providers/hashicorp/google-beta/latest/docs/resources/google_project_service_identity) | resource | +| [google_pubsub_subscription.dead-letter-pull-sub](https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/pubsub_subscription) | resource | +| [google_pubsub_subscription.this](https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/pubsub_subscription) | resource | +| [google_pubsub_subscription_iam_binding.allow-pubsub-to-ack](https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/pubsub_subscription_iam_binding) | resource | +| [google_pubsub_topic.dead-letter](https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/pubsub_topic) | resource | +| [google_pubsub_topic_iam_binding.allow-pubsub-to-send-to-dead-letter](https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/pubsub_topic_iam_binding) | resource | +| [google_service_account.this](https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/service_account) | resource | +| [google_service_account_iam_binding.allow-pubsub-to-mint-tokens](https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/service_account_iam_binding) | resource | +| [random_string.suffix](https://registry.terraform.io/providers/hashicorp/random/latest/docs/resources/string) | resource | + +## Inputs + +| Name | Description | Type | Default | Required | +|------|-------------|------|---------|:--------:| +| [ack\_deadline\_seconds](#input\_ack\_deadline\_seconds) | The deadline for acking a message. | `number` | `300` | no | +| [broker](#input\_broker) | The name of the pubsub topic we are using as a broker. | `string` | n/a | yes | +| [filter](#input\_filter) | A Knative Trigger-style filter over the cloud event attributes.

This is normally used to filter relevant event types, for example:

{ "type" : "dev.chainguard.foo" }

In this case, only events with a type attribute of "dev.chainguard.foo" will be delivered. | `map(string)` | `{}` | no | +| [filter\_has\_attributes](#input\_filter\_has\_attributes) | A Knative Trigger-style filter over the cloud event attribute prefixes.

This can be used to filter on the presence of an event attribute, for example:

["location"]

In this case, any event with a type attribute of "location" will be delivered. | `list(string)` | `[]` | no | +| [filter\_not\_has\_attributes](#input\_filter\_not\_has\_attributes) | A Knative Trigger-style filter over the cloud event attribute prefixes.

This can be used to filter on the absence of an event attribute, for example:

["location"]

In this case, any event with a type attribute of "location" will NOT be delivered. | `list(string)` | `[]` | no | +| [filter\_prefix](#input\_filter\_prefix) | A Knative Trigger-style filter over the cloud event attribute prefixes.

This can be used to filter relevant event types, for example:

{ "type" : "dev.chainguard." }

In this case, any event with a type attribute that starts with "dev.chainguard." will be delivered. | `map(string)` | `{}` | no | +| [max\_delivery\_attempts](#input\_max\_delivery\_attempts) | The maximum number of delivery attempts for any event. | `number` | `20` | no | +| [maximum\_backoff](#input\_maximum\_backoff) | The maximum delay between consecutive deliveries of a given message. | `number` | `600` | no | +| [minimum\_backoff](#input\_minimum\_backoff) | The minimum delay between consecutive deliveries of a given message. | `number` | `10` | no | +| [name](#input\_name) | n/a | `string` | n/a | yes | +| [notification\_channels](#input\_notification\_channels) | List of notification channels to alert. | `list(string)` | n/a | yes | +| [private-service](#input\_private-service) | The private cloud run service that is subscribing to these events. | 
object({
    name   = string
    region = string
  })
| n/a | yes | +| [project\_id](#input\_project\_id) | n/a | `string` | n/a | yes | +| [raw\_filter](#input\_raw\_filter) | Raw PubSub filter to apply, ignores other variables. https://cloud.google.com/pubsub/docs/subscription-message-filter#filtering_syntax | `string` | `""` | no | + +## Outputs + +| Name | Description | +|------|-------------| +| [dead-letter-broker](#output\_dead-letter-broker) | The name of the dead-letter topic, which is used to store events that could not be delivered. | + diff --git a/modules/cloudevent-job/cmd/invoker/main.go b/modules/cloudevent-job/cmd/invoker/main.go index 597bb27e..788955ed 100644 --- a/modules/cloudevent-job/cmd/invoker/main.go +++ b/modules/cloudevent-job/cmd/invoker/main.go @@ -7,7 +7,6 @@ package main import ( "context" - "encoding/base64" "fmt" "log" "os" @@ -74,7 +73,7 @@ func main() { Name: fmt.Sprintf("projects/%s/locations/%s/jobs/%s", projectID, env.JobRegion, env.JobName), Overrides: &runpb.RunJobRequest_Overrides{ ContainerOverrides: []*runpb.RunJobRequest_Overrides_ContainerOverride{{ - Args: []string{"--event", base64.StdEncoding.EncodeToString(eventJSON)}, + Args: []string{"--event", string(eventJSON)}, }}, }, })